This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80422ae7-d538-408d-b2b3-68ee6ae98ff6.roa
File:                     80422ae7-d538-408d-b2b3-68ee6ae98ff6.roa (raw, json)
Hash identifier:          Q1+6hFuoghU0atp3k16GdQsNjE5UzaO9eTV2+nMY61g=
Subject key identifier:   E3:4E:22:A5:3C:FB:2A:31:71:75:78:9A:D2:D7:A3:05:E6:56:7A:51
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4686715F49C012871B095B556982451FF329C52C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80422ae7-d538-408d-b2b3-68ee6ae98ff6.roa
Signing time:             Sun 07 Dec 2025 00:21:23 +0000
ROA not before:           Sun 07 Dec 2025 00:21:23 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        164.145.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:86:71:5f:49:c0:12:87:1b:09:5b:55:69:82:45:1f:f3:29:c5:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 00:21:23 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=d0b002cb809b86552fb6c59bbfd88f3eb31793e5ef55cbb2f3d928a26246e486, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:b3:70:9d:5a:47:f4:31:bf:b1:b6:15:b7:
                    1d:4d:aa:e1:70:b3:27:6c:74:60:32:a7:e5:52:0a:
                    77:82:10:45:ee:64:6a:6f:45:39:fa:20:c3:f2:50:
                    10:3a:19:bb:75:4d:c1:94:98:fd:63:01:a1:69:44:
                    90:86:d9:ba:3f:dd:fb:86:c8:ae:6d:9c:45:ce:10:
                    5a:d8:9c:1a:f9:75:b8:6a:a7:75:c1:ba:3c:54:68:
                    16:64:a9:a8:27:0d:47:d8:9b:08:48:d3:29:c8:51:
                    21:31:6b:65:2a:4e:0b:be:ba:cd:62:db:93:5f:8c:
                    ca:93:57:3e:2d:0f:64:2c:3c:93:ce:4d:81:99:aa:
                    17:3d:15:70:64:2d:13:6b:d6:44:f2:a4:e4:98:84:
                    b1:b1:57:6a:84:29:3a:5c:68:f4:89:3b:88:3b:89:
                    cf:33:3b:01:49:42:d7:f7:93:ee:fe:89:b0:91:10:
                    7f:e8:72:db:f5:7d:ae:9d:b8:35:0c:01:16:b7:ba:
                    19:70:76:9f:28:da:92:e3:1c:89:64:10:e2:9a:4f:
                    ac:2e:28:61:dd:fc:69:16:70:14:80:0e:7a:43:d5:
                    f5:a6:01:fb:72:93:97:5b:cf:7e:ec:02:67:00:a8:
                    1b:d1:16:40:a0:60:a9:d7:77:de:87:b9:5b:ba:69:
                    01:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4E:22:A5:3C:FB:2A:31:71:75:78:9A:D2:D7:A3:05:E6:56:7A:51
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80422ae7-d538-408d-b2b3-68ee6ae98ff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.145.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         85:49:5d:30:a9:1a:c0:77:f3:ac:02:fb:35:03:03:d1:e1:c5:
         82:d9:95:f5:87:11:d8:ad:40:ac:09:c6:c1:f6:3f:ff:ba:f5:
         a8:9f:28:99:6f:89:24:ba:90:45:8c:92:0f:56:49:71:2c:cd:
         91:f1:81:50:b3:fd:3e:af:cc:eb:8a:e7:db:2d:fe:40:ea:79:
         2d:3b:64:cc:48:ea:72:a8:34:94:64:6b:46:8e:6c:cb:19:af:
         61:e7:05:b3:3c:32:de:23:e6:21:a2:5d:80:a6:af:64:d9:b8:
         1d:91:9c:0e:3c:d4:52:82:a6:a6:ac:ae:ed:0d:33:b9:77:61:
         22:af:06:df:99:44:53:e2:a3:0a:b5:e2:dc:b1:37:ad:f9:4a:
         9f:aa:c9:77:00:e2:8e:e4:e1:25:89:5c:00:9d:19:93:20:64:
         c0:33:d4:83:70:58:a5:7f:1b:86:68:52:6d:c7:c2:c9:1c:b7:
         01:d5:b8:d9:6f:d6:ff:65:14:6d:e0:0d:6c:2c:89:5e:51:9d:
         63:b9:c7:cc:a6:0b:88:fb:95:c9:21:4c:ef:84:59:2c:98:19:
         9a:e4:77:6c:f3:da:7c:66:36:8c:99:e6:d6:46:d8:db:5b:83:
         08:60:7e:bb:06:a9:34:39:7f:27:80:bb:a6:65:60:5d:30:7f:
         b0:9d:a7:8c
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIURoZxX0nAEocbCVtVaYJFH/MpxSwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA3MDAyMTIzWhcNMjYwMzA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BkMGIwMDJjYjgwOWI4NjU1MmZiNmM1OWJiZmQ4OGYzZWIz
MTc5M2U1ZWY1NWNiYjJmM2Q5MjhhMjYyNDZlNDg2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwa7NwnVpH9DG/sbYVtx1NquFwsydsdGAyp+VSCneCEEXu
ZGpvRTn6IMPyUBA6Gbt1TcGUmP1jAaFpRJCG2bo/3fuGyK5tnEXOEFrYnBr5dbhq
p3XBujxUaBZkqagnDUfYmwhI0ynIUSExa2UqTgu+us1i25NfjMqTVz4tD2QsPJPO
TYGZqhc9FXBkLRNr1kTypOSYhLGxV2qEKTpcaPSJO4g7ic8zOwFJQtf3k+7+ibCR
EH/octv1fa6duDUMARa3uhlwdp8o2pLjHIlkEOKaT6wuKGHd/GkWcBSADnpD1fWm
Aftyk5dbz37sAmcAqBvRFkCgYKnXd96HuVu6aQFTAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU404ipTz7KjFxdXia0tejBeZWelEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzgwNDIyYWU3LWQ1MzgtNDA4ZC1iMmIzLTY4ZWU2YWU5OGZmNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCkkTANBgkqhkiG9w0BAQsFAAOCAQEAhUldMKkawHfzrAL7NQMD0eHFgtmV
9YcR2K1ArAnGwfY//7r1qJ8omW+JJLqQRYySD1ZJcSzNkfGBULP9Pq/M64rn2y3+
QOp5LTtkzEjqcqg0lGRrRo5syxmvYecFszwy3iPmIaJdgKavZNm4HZGcDjzUUoKm
pqyu7Q0zuXdhIq8G35lEU+KjCrXi3LE3rflKn6rJdwDijuThJYlcAJ0ZkyBkwDPU
g3BYpX8bhmhSbcfCyRy3AdW42W/W/2UUbeANbCyJXlGdY7nHzKYLiPuVySFM74RZ
LJgZmuR3bPPafGY2jJnm1kbY21uDCGB+uwapNDl/J4C7pmVgXTB/sJ2njA==
-----END CERTIFICATE-----
Generated at Sun Dec 7 12:02:59 2025 by rpki-client